ap.org

- The Associated Press -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0e:5d:f8:06:f0:0c:66:d1:4d:9b:65:ad:af:7f:23:97 was issued on by DigiCert Inc.

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Associated Press

Organization: The Associated Press
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:5d:f8:06:f0:0c:66:d1:4d:9b:65:ad:af:7f:23:97
Serial Number (int): 19097106136074636899258930794235634583
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f7:8b:bc:fe:ce:79:4d:a1:21:8f:6b:b2:70:bc:c9:38:8b:57:97:a2
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 06:16:66:78:59:a4:bf:01:e8:7e:9d:8e:2c:88:d5:9f:9b:0c:da:8b
Fingerprint (sha256): 20:3c:37:52:70:bd:5e:d0:61:00:92:dc:32:64:da:38:15:90:18:c0:e3:25:f4:c6:27:2f:5a:3c:90:9b:5b:e7

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate ap.org

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ap.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ap.org
ai.ap.org
aphelp.ap.org
applanner.com
aptop25.com
apvc.ap.org
apvc2.ap.org
apvideohub.ap.org
apvotecount.ap.org
apvotecount2.ap.org
backup.ap.org
bigstory.ap.org
binaryapi.ap.org
blog.ap.org
brand.ap.org
careers.ap.org
classic.apimages.com
collegebasketball.ap.org
collegebasketballdev.ap.org
collegebasketballqa.ap.org
collegefootball.ap.org
customersupport.ap.org
cvpa10.ap.org
cvpa20.ap.org
digitalservices.ap.org
digitalservicesdev.ap.org
digitalservicesqa.ap.org
dne.ap.org
download.apassignments.com
download.apmultimedianewsroom.com
elections.ap.org
electionsdev.ap.org
electionsstage.ap.org
hosted.ap.org
hostedqa.ap.org
inside.ap.org
insights.ap.org
interactives-dev.ap.org
interactives-qa.ap.org
interactives-staging.ap.org
interactives.ap.org
interactives.aptechdevlab.com
interactives.aptechlab.com
interactives.associatedpress.com
interactivesqa.ap.org
interactivesqa1.ap.org
leads.ap.org
login.ap.org
mail-ctc.ap.org
mail-lon.ap.org
newsroom.ap.org
openings.ap.org
poll.ap.org
polls.ap.org
preview.apvideohub.ap.org
preview.newsroom.ap.org
pro32.ap.org
pro32qa.ap.org
pronto.ap.org
racing.ap.org
roam.ap.org
securedrop.ap.org
summergames.ap.org
syndication.ap.org
videoproduction.ap.org
webfeeds.ap.org
webmail.ap.org
wfm.ap.org
wfpreview.ap.org
wintergames.ap.org
www.aparchive.com
www.apexchange.com
www.apimages.com
www.applanner.com
www.aptop25.com
www.apvideous.com
www.collegebasketball.ap.org
www.collegefootball.ap.org
www.elections.ap.org
www.pro32.ap.org
www.racing.ap.org
www.wintergames.ap.org

Other certificates including the domain name ap.org

(limited to 100 certificates)
feedback.ap.org
ervaring.nedvice.nl
ervaring.nedvice.nl
playbook.ap.org
ervaring.nedvice.nl
www.ap.org
help.ap.org
nycwlcdmz1.ap.org
ap.org
apipreview.ap.org
careers.ap.org
appbnom11.ap.org
ervaring.nedvice.nl
ctchive01.ap.org
inside.ap.org
cwa-ctc.ap.org
ap.org
partners.apvideohub.ap.org
discover.ap.org
ASSP-EXPC-P.ap.org
ap.org
ap.org
epix.ap.org
mail-ctc.ap.org
ap.org
ap.org
ervaring.nedvice.nl
backup.ap.org
ervaring.nedvice.nl
eapws.ap.org
developer.ap.org
ervaring.nedvice.nl
datakit.ap.org
login.ap.org
kibana.associatedpress.com
api.ap.org
DeveloperAPIPreview.ap.org
ap.org
blog.ap.org
sunshine.ap.org
ipdlonbackhaul.ap.org
approdpbnom11.ap.org
careers.ap.org
easyvista.ap.org
ap.org
ssrpm.ap.org
vault.ap.org
tokive01.ap.org
login.ap.org
ctcgsscasper01.ap.org
ap.org
easyvista.ap.org
crmgw.ap.org
api.ap.org
ervaring.nedvice.nl
ervaring.nedvice.nl
preview.apvideohub.ap.org
ervaring.nedvice.nl
ap.org
sunshine.ap.org
store.ap.org
store.ap.org
origin.hosted.ap.org
ap.org
ap.org
blog.ap.org
store.ap.org
tokive01.ap.org
ap.org
approdpbnom12.ap.org
apipreview.ap.org
ap.org
apvideohub.ap.org
Developerapi.ap.org
eapadmin2.ap.org
ervaring.nedvice.nl
mysap.ap.org
blog.ap.org
discover.ap.org
inside.ap.org
wfm.ap.org
ap.org
discover.ap.org
IMSIPAPGW01.ap.org
ap.org
api-qa.ap.org
ap.org
partners.apvideohub.ap.org
blog.ap.org
store.ap.org
apvideohub.ap.org
sports.ap.org
bejive01.ap.org
discover.ap.org
gamestream.ap.org
apipreview.ap.org
ervaring.nedvice.nl
discover.ap.org
tokive01.ap.org
ervaring.nedvice.nl

Certificate

The complete raw certificate details for ap.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusC0gi++fj2b4hStEjWD
SCsbn+lhOZBJaXH/HfK45rlUMB1ksTQ0V81+URZsyPOBj+yRIb43pEsR07aTeH/x
AV5dSCus5zQqyF+NByl+E90coGh4tDBKNcBVyfvGqhSVjiAYjC3+PXh1hKHjTbjR
Eu8z92rl7rJ9DvLh0LUSF1a2TGr3/N/DTO+757tEo1QGLNOspZkscgWKtbhTrp9o
62ndofsvAukL/HJtv8qt0jyR+T/Ev9guRjvbz0czKbX88k9JsIjmtgFwOJFY2pUo
dRaMDSc4pCG2qgKzNRfZMS2XN9ZIAKJW23r4OnOxt4uKcpPTLUvl2R6R7pcJ1TRy
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19097106136074636899258930794235634583
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Associated Press'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ap.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23575351155845437087551135054658920520189804117380414235045966042809285579351773601899825249043027871425137115767712362935344561720786231412957427413651370262091687514872447306568295206778970562312332347157536253437870050271353094184645901183733710875967878366668664386721844766085613232470824518700642149932309081977204157569590762056690681191081928547374461413589092851943924256075023367110283620707842083386660057096412902728024569408549553128603524460059907334262932545011129970354097571832347217809972104196104702773301084875395491421250456896664646559190158896727090091203677668176311507952602408543536729584363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f78bbcfece794da1218f6bb270bcc9388b5797a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1613 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ai.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aphelp.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aptop25.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apvc.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apvc2.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apvideohub.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apvotecount.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apvotecount2.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigstory.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binaryapi.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classic.apimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegebasketball.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegebasketballdev.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegebasketballqa.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegefootball.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customersupport.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvpa10.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvpa20.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalservices.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalservicesdev.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalservicesqa.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dne.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.apassignments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.apmultimedianewsroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elections.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electionsdev.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electionsstage.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosted.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostedqa.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactives-dev.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactives-qa.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactives-staging.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactives.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactives.aptechdevlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactives.aptechlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactives.associatedpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactivesqa.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactivesqa1.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-ctc.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-lon.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openings.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poll.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polls.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.apvideohub.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.newsroom.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro32.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro32qa.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pronto.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racing.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roam.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedrop.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summergames.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syndication.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videoproduction.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webfeeds.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfm.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfpreview.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wintergames.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aparchive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aptop25.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apvideous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegebasketball.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegefootball.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elections.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pro32.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.racing.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wintergames.ap.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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